Privacy notice for parents and carers
Last updated 8 October 2026. There's also a short notice for children.
7 Seas Revision is run by Joseph Davoren. We decide how your information is used, so we are the "controller" under UK data protection law. Contact us about privacy at info@7seasrevision.co.uk.
The account belongs to you, the parent or carer. Each child has a profile inside your account: children don't have their own login, email address or password.
What we collect
| Whose | What | Where it comes from |
|---|---|---|
| Yours | Email address and password (stored scrambled, so we can't read it) | You, when you sign up |
| Yours | Confirmation that you're 18 or over and accept the terms | You, at sign-up |
| Yours | Name, billing address and payment history. Card details go straight to Stripe; we never see or store them | You, at checkout (via Stripe) |
| Yours | Which courses each child has, prices, payment dates, cancellations | Created when you subscribe |
| Your child's | First name (or a nickname), school year if you add it, and a picture chosen from our set | You |
| Your child's | Answers and scores on the free diagnostic test, practice questions, Captain's Challenges and mock papers; which Voyages are finished; time taken on mock papers | Created as your child uses the app |
| Your child's | Topic labels worked out from those results: Focus, Secure, Achieving, Emerging and Review | Worked out by the app |
| Your child's | Photos of printed answer sheets, only if you choose to upload one | You |
| Technical | IP address, browser type and times of visits, in server logs | Your device |
We don't collect your child's surname, date of birth, school, location, photo of them, voice or contact details. Please don't put these into the name box or answer-sheet photos. Printed mock papers show your child's first name, but that is added to the download and not stored separately.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your account, let you log in, and send emails the service needs (sign-up, password reset, payment receipts, subscription reminders) | Contract with you |
| Provide the learning service for your child: mark answers, track progress, suggest the next topic, show results to you | Legitimate interests: giving your child the service you asked for. We have weighed this against your child's interests in our data protection impact assessment |
| Take payments and manage subscriptions | Contract with you |
| Keep payment and tax records | Legal obligation |
| Keep the service secure and fix faults, using server logs | Legitimate interests |
We don't use your information or your child's for advertising, and we don't sell it. We don't send marketing emails. The app's topic labels are worked out automatically from scores, but they only guide revision and have no legal or similarly significant effect on anyone.
Who we share it with
We only share information with companies that help us run the service, under contracts that limit what they can do with it. Your child's learning records go to Supabase and Vercel only, as storage and hosting. Stripe never receives your child's name or results.
| Company | What they do for us | What they handle | Where |
|---|---|---|---|
| Supabase | Database, login and file storage | Everything in the app, including children's profiles and results | Stored in London, UK. Supabase is a US company, so its support staff may access it from abroad |
| Vercel | Hosts the website and runs its server code | Information passing through while you use the site; server logs | London, UK. Vercel is a US company |
| Stripe | Takes payments and manages subscriptions | Your name, email, billing address, card and payment history | UK and EU, with some processing in the US |
| Supabase (for now) | Sends service emails | Your email address and the email's content | US. We'll update this when we set up our own email service |
Stripe also uses payment information for its own purposes, such as fraud prevention and meeting financial regulations. For that it acts as a separate controller under Stripe's privacy policy.
We may also share information if the law requires it, or to protect someone's safety. If the business is ever sold, the buyer would take over this notice.
Transfers outside the UK
Some of these companies are based in the US, so information may be accessed from there. When that happens it is protected by the UK's data adequacy rules for certified US companies (the UK-US "data bridge"), or by the UK's approved contract terms, which each company includes in its data processing agreement.
How long we keep it
| Information | How long |
|---|---|
| Your child's profile and learning records | While you have an account. If you stop subscribing, we delete it 12 months after your last paid month ends. You can delete a profile yourself at any time from Edit profile, and it's deleted straight away |
| Your account | Until you ask us to delete it. If you've never subscribed and haven't logged in for 12 months, we delete the account and any child profiles in it. We'll email you a month before. |
| Payment and tax records | As long as tax law requires, currently up to 6 years |
| Answer-sheet photos | With the mock paper they belong to: deleted when the profile is deleted |
| Server logs | A short time, usually days, then deleted automatically |
| Backups | Overwritten within 7 days |
Keeping it safe
- Everything travels over an encrypted connection (HTTPS).
- Database rules mean each parent can only see their own children's information. Answer keys and marking stay on our server.
- Passwords are stored scrambled, and card details never reach us.
- Answer-sheet photos and mock-paper downloads are kept in private storage, not public links.
- An independent developer reviews the app's security before launch.
Your rights
You can ask us to:
- give you a copy of the information we hold about you or your child (you can download it yourself from Your account);
- correct anything that's wrong (you can edit your child's name, year and picture yourself);
- delete your information or your child's (you can delete a child's profile, or your whole account, yourself);
- restrict or stop some uses of it, or object to our use based on legitimate interests;
- send it to you in a form a computer can read, so you can move it elsewhere.
Email info@7seasrevision.co.uk. We'll reply within one month and won't charge. We may ask you to confirm who you are first. You can act for your child; an older child can also ask us directly, and we'll talk to you about it where that's appropriate.
Cookies
We only use cookies that the site needs to work: they keep you logged in. These don't need your consent, and we don't use advertising, analytics or tracking cookies. Stripe sets its own cookies on its payment page to prevent fraud; see Stripe's cookie policy.
Children's information
We follow the ICO's Age Appropriate Design Code (the Children's Code):
- Collect little: a first name and learning results, nothing more.
- No sharing for profit: no adverts, no selling data, no social features, no chat, and no contact with other users.
- Honest with children: children see a short notice written for them, and the app tells them their grown-up can see their progress.
- No location tracking and no tricks to keep children on the app longer.
- Learning suggestions only: the app suggests what to revise from your child's results. That's the only profiling we do, and it's there to help them learn.
The service is for parents and carers to use with children aged about 8 to 13. Adults must be 18 or over to make an account.
Complaints
Please tell us first at info@7seasrevision.co.uk, and we'll try to put it right. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this notice
If we change how we use information, we'll update this page and change the date at the top. For important changes, we'll tell you by email before they take effect.